CLSA-2025-1763990271
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1763990271.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1763990271
- Upstream
- Published
- 2025-11-24T13:17:54Z
- Modified
- 2026-06-04T10:03:47.634326740Z
- Summary
- Fix of 12 CVEs
- Details
-
- Focal update: v5.4.291 upstream stable release (LP: #2106002) //
CVE-2024-58072
- wifi: rtlwifi: remove unused checkbuddypriv
- Focal update: v5.4.291 upstream stable release (LP: #2106002)
- wifi: rtlwifi: remove unused timer and related code
- wifi: rtlwifi: remove unused dualmac control leftovers
- Focal update: v5.4.237 upstream stable release (LP: #2023420)
- ext4: move where set the MAYINLINEDATA flag is set
- CVE-url: https://ubuntu.com/security/CVE-2024-58014
- wifi: brcmsmac: add gain range check to wlcphyiqcalgainparamsnphy()
- CVE-url: https://ubuntu.com/security/CVE-2025-38352
- posix-cpu-timers: fix race between handleposixcputimers() and posixcputimerdel()
- CVE-url: https://ubuntu.com/security/CVE-2022-25265
- x86/elf: Add table to document READIMPLIESEXEC
- x86/elf: Split READIMPLIESEXEC from executable PTGNUSTACK
- x86/elf: Disable automatic READIMPLIESEXEC on 64-bit
- Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url:
https://ubuntu.com/security/CVE-2024-37078
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- CVE-url: https://ubuntu.com/security/CVE-2022-49170
- f2fs: fix to do sanity check on curseg->alloc_type
- CVE-url: https://ubuntu.com/security/CVE-2021-47479
- staging: rtl8712: fix use-after-free in rtl8712dlfw
- Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url:
https://ubuntu.com/security/CVE-2024-39469
- nilfs2: fix nilfsemptydir() misjudgment and long loop on I/O errors
- CVE-url: https://ubuntu.com/security/CVE-2022-49519
- ath10k: skip ath10k_halt during suspend for driver state RESTARTING
- CVE-url: https://ubuntu.com/security/CVE-2024-46713
- perf/aux: Fix AUX buffer serialization
- Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url:
https://ubuntu.com/security/CVE-2023-52804
- fs/jfs: Add check for negative db_l2nbperpage
- fs/jfs: Add validity check for dbmaxag and dbagpref
- Focal update: v5.4.251 upstream stable release (LP: #2034918) // CVE-url:
https://ubuntu.com/security/CVE-2023-52804
- jfs: jfsdmap: Validate dbl2nbperpage while mounting
- CVE-url: https://ubuntu.com/security/CVE-2024-36880
- Bluetooth: qca: add missing firmware sanity checks
- Miscellaneous upstream changes
- net: openvswitch: fix nested key length validation in the set() action
- isofs: Prevent the use of too small fid
- ext4: ignore xattrs past end
- net: ppp: Add bound checking for skb data on pppsynctxmung
- media: venus: hfi: add check to handle incorrect queue size
- sctp: detect and prevent references to a freed transport in sendmsg
- ext4: improve xattr consistency checking and error reporting
- ext4: introduce ITAIL helper
- ext4: fix out-of-bound read in ext4xattrinodedecrefall()
- ibmvnic: Do not attempt to login if RX or TX queues are not allocated
- ibmvnic: Enable GRO
- ibmvnic: Fix netdev feature clobbering during a reset
- ibmvnic: create sendcontrolipoffload
- ibmvnic: Define vnicloginclientdata name field as unsized array
- ibmvnic: Use strscpy() instead of strncpy()
- ibmvnic: Use kernel helpers for hex dumps
- wifi: at76c50x: fix use after free access in at76disconnect
- Focal update: v5.4.291 upstream stable release (LP: #2106002) //
CVE-2024-58072
- References
Affected packages
TuxCare:Ubuntu:18.04
linux-buildinfo-4.15.0-253-tuxcare.els41-generic
linux-buildinfo-4.15.0-253-tuxcare.els41-lowlatency
linux-cloud-tools-4.15.0-253-tuxcare.els41
linux-cloud-tools-4.15.0-253-tuxcare.els41-generic
linux-cloud-tools-4.15.0-253-tuxcare.els41-lowlatency
linux-cloud-tools-common
linux-doc
linux-headers-4.15.0-253-tuxcare.els41
linux-headers-4.15.0-253-tuxcare.els41-generic
linux-headers-4.15.0-253-tuxcare.els41-lowlatency
linux-image-unsigned-4.15.0-253-tuxcare.els41-generic
linux-image-unsigned-4.15.0-253-tuxcare.els41-lowlatency
Package
- Name
- linux-image-unsigned-4.15.0-253-tuxcare.els41-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-253-tuxcare.els41-lowlatency?distro=ubuntu-18.04